CU Village CMS Site 1.0 – ‘print_view’ Blind SQL Injection
+===================================================================================+
php
php 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Joomla! Component Jobads – ‘type’ SQL Injection
source: https://www.securityfocus.com/bid/37686/info
Datetopia Match Agency BiZ – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/40488/info
Calendarix 0.7 – ‘calpath’ Remote File Inclusion
source: https://www.securityfocus.com/bid/37673/info
dotProject 2.1.3 – Multiple SQL Injections / HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/37669/info
Joomla! Component DM Orders – ‘id’ SQL Injection
source: https://www.securityfocus.com/bid/37655/info
Joomla! Component Regional Booking – ‘id’ Blind SQL Injection
Joomla Component Regional Booking (id) Blind SQL Injection Vulnerability
Drupal 6.15 – Multiple Persistent Cross-Site Scripting Vulnerabilities
# Exploit Title: 0day Drupal
Read Excel Script 1.1 – Arbitrary File Upload
Read Excel v1.1 Shell Upload Vulnerability
AutoIndex PHP Script – ‘index.php’ Directory Traversal
==============================================================================
Ulisse’s Scripts 2.6.1 – ‘ladder.php’ SQL Injection
# Tested on: Windows Vista Home Premium and Linux 2.6.28.1 (Backtrack 3)
Zeeways Technology – ‘product_desc.php’ SQL Injection
#############################################################
SpawCMS Editor – Arbitrary File Upload
# Author: j4ck
Roundcube Webmail – Multiple Vulnerabilities
# Exploit Title: RoundCube Webmail XSS Voulerability
Joomla! Component com_king – Blind SQL Injection
#############################################################
Joomla! Component com_kk – Blind SQL Injection
#############################################################
Milonic News – ‘viewnews’ SQL Injection
=============================================================================
Docebo 3.6.0.2 (stable) – Local File Inclusion
# Exploit Title: Docebo 3.6.0.2 (stable) Local File Inclusion
AWCM – Database Disclosure
Subject:AWCM
Joomla! Component com_perchagallery – SQL Injection
########################################################################
MobPartner Counter – Arbitrary File Upload
_____________________________________________________
PHPDug 2.0.0 – Cross-Site Scripting
========================================================================================
Myuploader – Arbitrary File Upload
# Exploit Title: Myuploader >> upload shell exploit
PHPDirector Game Edition 0.1 – Local File Inclusion / SQL Injection / Cross-Site Scripting
# Exploit Title: PHPDirector Game Edition Multiple Vulnerabilities (LFI/SQLi/Xss)
ITaco Group ITaco.biz – ‘view_news’ SQL Injection
=============================================================================
L2Web LineWeb 1.0.5 – Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/40577/info
KubeLabs PHPDug 2.0 – ‘upcoming.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40554/info
Sniggabo CMS 2.21 – ‘search.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/40534/info
Roundcube Webmail 0.2 – Cross-Site Scripting
source: https://www.securityfocus.com/bid/37654/info
LineWeb 1.0.5 – Multiple Remote Vulnerabilities
source: https://www.securityfocus.com/bid/37613/info
LXR 0.9.x – Cross Referencer Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/37612/info
Pay Per Minute Video Chat Script 2.x – SQL Injection / Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/40585/info
MercuryBoard 1.1.5 – ‘index.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37605/info
WMNews – ‘/admin/wmnews.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37600/info
pL-PHP 0.9 – ‘index.php’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/37593/info
LightOpenCMS 0.1 – ‘smarty.php’ Remote File Inclusion
# Exploit Title: LightOpen CMS Remote File Inclusion (smarty.php)
ImagoScripts Deviant Art Clone – SQL Injection
Exploit Title:ImagoScripts Deviant Art Clone SQL Injection Vulnerability
Ninja Blog 4.8 – Multiple Vulnerabilities
========================================================================================
Joomla! Component com_j-projects – Blind SQL Injection
#############################################################
Gbook MX 4.1.0 (Arabic Version) – Remote File Inclusion
========================================================================================
Joomla! Component com_cartikads 1.0 – Arbitrary File Upload
###################################################################################
Pay Per Minute Video Chat Script 2.0/2.1 – Multiple Vulnerabilities
[?] ?????????????????????????{In The Name Of Allah The Mercifull}??????????????????????
Joomla! Component com_oziogallery2 / IMAGIN – Arbitrary File Write
# Exploit Title: Joomla component com_oziogallery2 / IMAGIN arbitrary file write
Elite Gaming Ladders 3.0 – SQL Injection
# Exploit Title: Elite Gaming Ladders v3.0 SQL Injection Exploit
Smart Vision Script News – ‘newsdetail.php’ SQL Injection (1)
# Exploit Title: Smart Vsion Script News (newsdetail) SQL Injection Vulnerability
WorldPay Script Shop – ‘productdetail’ SQL Injection
============================================
Simple Portal 2.0 – Authentication Bypass
+===================================================================================+
Joomla! Component Bamboo Simpla Admin Template – SQL Injection
[?] ?????????????????????????{In The Name Of Allah The Mercifull}??????????????????????